Crash-Only Medicine

There's a concept in software engineering called crash-only design. The premise sounds almost reckless: instead of writing careful code to shut a system down gracefully - closing connections, saving everything neatly before power-off - you design the system around the assumption that it will never get that chance. It will simply crash. So you build it to survive crashing.

The trick isn't indifference to what gets lost. It's the opposite. Because a crash-only system can never count on a clean goodbye, it's forced to continuously persist its state as it goes - writing everything important to storage in small increments, the entire time, not just at the end. Autosave is the classic example: it doesn't wait for you to save your work before assuming your session might die. It assumes the crash is coming and keeps a running copy the whole time, so when the crash actually happens, almost nothing is lost. The system recovers fast and recovers fully, precisely because it never trusted the more graceful path to protect anything in the first place.

The alternative - a system built on the assumption of a clean shutdown - looks more stable right up until it isn't. That shutdown path gets exercised so rarely that nobody notices it's broken. Then the power actually cuts unexpectedly, the save-on-exit routine never runs, and everything since the last checkpoint is gone.
Academic medicine crashes constantly. It was just never built like a crash-only system.

Every July, a huge share of the physician workforce turns over at once - new interns, new admin, new chiefs inheriting services they didn't run last week. Residents leave mid-year. Attendings get pushed out or leave. People burn out and walk away with no notice at all. The crash, in one form or another, is close to constant.

And yet almost none of medicine's actual infrastructure assumes this. Institutional judgment, the thing that actually makes an experienced physician valuable, the pattern recognition built from ten thousand small decisions, lives almost entirely in individual heads. It isn't checkpointed anywhere. It isn't autosaved. The system is designed around the fantasy of the graceful handoff: the retiring attending who mentors a successor for a year, the outgoing chief who walks the incoming one through every case, the calm transfer of accumulated judgment from one person to the next, on purpose, over time. That path exists in theory. In practice, it's the rarely-exercised shutdown routine, invoked so inconsistently that when the crash actually happens, as it constantly does, there's nothing to recover from. The knowledge doesn't get restored. It just gets re-derived from scratch, by whoever's left, at whatever cost that takes.

This is a genuinely worse position than either honest design would produce. A system that was actually built for low turnover would at least have the stability to make the missing autosave less costly. A system that was actually built for crash-only resilience would have the persistence to make the constant turnover survivable. Medicine has the crash frequency of the second and the fragility of the first - all of the instability, none of the infrastructure that would make the instability tolerable. Medicine as a field builds in these fail-safes - documenting and passing down knowledge deliberately and intentionally. But it doesn’t excel at doing so at the individual institution’s level.

You can see what's missing by noticing what almost never exists. There's rarely a structured handoff document that captures not just the facts of a service but the judgment calls behind them, the "here's what I'd actually watch for" knowledge that never makes it into a note. Some of this knowledge will undoubtedly be passed down naturally throughout the course of working with others at an institution, but it is almost never done formally. Mentorship is treated as a personality trait some attendings happen to have, not as infrastructure the institution is responsible for building and maintaining regardless of who's doing the mentoring that year.

And there's a second, harder layer underneath the institutional one, and it's the part that makes medicine's version of this worse than another business losing a departing employee. What happens when it isn't just a role or a project that crashes, but the story you tell about who you are? Identity crashes are the ones you're least likely to recover cleanly from, because they take away the very vantage point you'd normally use to steady yourself through any other kind of crash. And medicine trains its people to build identities that are about as all-consuming as an identity can get. "Physician" isn't usually one role among several. For a lot of people in this field, by design and by culture, it's the whole self-concept - which means that when the crash comes, whether it's burnout, a forced exit, or simply aging out of a role you built your entire identity around, it isn't just a career interruption. It might be the hardest thing to come back from at all.

So the real design failure isn't that medicine lacks a graceful path - nothing does, and wishing for one is the fallacy, not the fix. The real design failure is twofold: almost nothing is engineered to survive the crash intact, and almost everyone is encouraged to build an identity so singular that the crash, when it comes, has nowhere smaller to land.

None of this is something any individual can fix at the institutional level. You can't force a hospital to build a real handoff process, and you can't retroactively install mentorship as infrastructure.

You can't make the institution autosave, but you can make sure that you do. It means passing your inherited knowledge onto the next class, with intention. And it means noticing, well before any crash forces the question, how much of "who you are" currently has no existence outside of "physician." It doesn’t mean you have to have one foot out the door. It just means monitoring and ensuring some part of your identity was never running on hospital infrastructure in the first place - so that when the crash comes, and it will, there's a smaller, sturdier thing underneath it that doesn't go down with the rest of the system.

The Ultimate IMG Residency Match Webinar

• Dr. Imane Tarib – Ophthalmology

• Dr. Jessica Darusz – Neurology

• Dr. Helena – Emergency Medicine

• Dr. Oumaima Outani – Internal Medicine

• Dr. Frances Mei Hardin (Host)

The HC brought together four physicians who successfully navigated the IMG journey to answer the questions every international medical graduate is asking. Thank you to everyone who tuned in! And in case you missed it, check out the conversation on the HC Youtube channel.

A Few Of Our Favorite 'Progress Notes' From July

“Back In My Day:” A Resident’s Retort

By Liz Malphrus, MD, MPP

The “back in my day” crowd is right about one thing: residency has changed dramatically since back in the day. But it's not because of duty hours, or laziness, or any version of "kids these days.” The problem is the crushing force of corporatization, driving a wedge through the heart of academic medicine, and specifically between the residents and attendings who should be fighting together to protect it.

The Most Professional Trauma Response

By Mel Thacker, MD

Next time your office manager asks you to double-book, pause for one breath and check. Tense or relaxed? If the answer is tense, that doesn't necessarily mean you decline. It means you now know the truth. You can still say, "Sure, I'll see them”, but you say it knowing you are choosing to override your body consciously. That single act of awareness is the difference between abandoning yourself and making a sacrifice.

68yo Anesthesiologist Becomes Most Board-Certified Anesthesiologist in the World In Vain Attempt for Promotion

By Latha Panchap MD

And on it goes, for each board exam she has a reason, a specific incident, a story. She took the ultrasound boards when she overheard one of her male colleagues say “Ultrasound is not a skill in my wheelhouse.” Hoping this would prove her to be a more competent anesthesiologist to her peers and superiors, Dr. Aweku continued to collect certifications, but somehow, with each new credential, another roadblock emerged to prevent her from earning a pay raise or even a slight modicum of recognition.

How International Medical Graduates Can Find Research Opportunities in the United States

By Imane Tarib, MD

For many International Medical Graduates (IMGs), research is much more than another line on the CV. It’s a gateway to mentorship, networking, publications, and ultimately residency or fellowship opportunities in the United States. Yet for many IMGs applying from abroad, the process feels completely gatekept. You don't know where to look, who to contact, or whether anyone will even reply to your email.

The Moralizing of Health in Widow’s Bay

By Sacha McBain, PhD

Ruth’s response to Tom’s trolley problem is the moral center of the finale. She is not arguing that suffering can be avoided. She understands that the world is violent, unpredictable, and often deeply unfair. What she rejects is the belief that suffering gives us permission to decide that another person’s life is the acceptable price of survival.

Your Podcast Binge List

We linked some YouTube and Spotify pages for you, but click here to listen to any of our shows on the platform of your choice.

• Social Rounds - Tony Chin-Quee, MD & Frances Mei Hardin - How to Say Goodbye: Leaving Medicine, Jobs & Relationships | Social Rounds Finale

• Fem MD - Lauren Umstattd, MD - How to Market Your Private Practice (Without Paid Ads) | The Business of Surgery Ep. 5

• Surgeons with Purpose - Mel Thacker, MD - Why Women Are Leaving with Dr. Cornelia Griggs & Dr. Jose Greenspon

• Surgeon, Interrupted - Frances Mei Hardin, MD & Christina Greenfield, MD, JD - From Corporate Lawyer to Orthopedic Surgeon: Failure, Bias & Surviving Residency

• The Other Human in the Room - Joan Chan, MD - The Theatre of Medicine with Alexis Milligan

• Cut & Tell with Liz Malphrus, MD - Why Surgical Residency Cured My People-Pleasing Tendencies

Explore Our Growing Podcast Network

Here’s what’s live and ready for your next commute, call-room break, or coffee run:

• Cut & Tell - Liz Malphrus, MD

• Fem MD - Lauren Umstattd, MD

• Social Rounds - Tony Chin-Quee, MD + Frances Mei Hardin, MD

• Surgeon, Interrupted - Frances Mei Hardin, MD

• Surgeons with Purpose - Mel Thacker, MD

• The Other Human in the Room - Joan Chan, MD

Want to Get Involved?

Since launching, we’ve been blown away by how many physicians have reached out asking, “How can I get involved?”

Here’s how:

• Submit your writing for consideration on our blog

• Pitch us a creative idea or original column

• Apply to be a guest on a podcast

• Follow us and share our content on Instagram, TikTok, and YouTube 

The Collective only works because of voices like yours, and there’s always room for more.

Until next month,
The HC Team

Join the movement

You bring the vision. We make it loud.